extension-real-browser-testing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the “read-frog page-translation capture recipe” workflow, the agent opens a user-specified target content page, then waits for and captures live DOM text/spinner nodes from that page at runtime (Step 3/4/7/10), meaning outsider-authored free text on the page is ingested via DOM.